agent-protocol

Guides for using ai agents skills like agent-protocol.

• Caveman: Cut Claude Token Use by 65%

  How agent-side prompt compression works, when to use it, and when not to.
• What is an AI Skills Marketplace?

  Definitions, how marketplaces work, and how to choose between them in 2026.
• Getting Started with AI Skills

Last scanned: 4/27/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "@babel/runtime: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@nestjs/common: nest allows a remote attacker to execute arbitrary code via the Content-Type header",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@nestjs/core: @nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@openapitools/openapi-generator-cli: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "ajv: ajv has ReDoS when using `$data` option",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "axios: Server-Side Request Forgery in axios",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "body-parser: body-parser vulnerable to denial of service when url encoding is enabled",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "brace-expansion: brace-expansion Regular Expression Denial of Service vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "braces: Uncontrolled resource consumption in braces",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "cookie: cookie accepts cookie name, path, and domain with out of bounds characters",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "cross-spawn: Regular Expression Denial of Service (ReDoS) in cross-spawn",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "express: express vulnerable to XSS via response.redirect()",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "external-editor: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "follow-redirects: follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "form-data: form-data uses unsafe random function in form-data for choosing boundary",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "inquirer: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "js-yaml: js-yaml has prototype pollution in merge (<<)",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "lodash: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "micromatch: Regular Expression Denial of Service (ReDoS) in micromatch",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "path-to-regexp: path-to-regexp outputs backtracking regular expressions",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "qs: qs's arrayLimit bypass in comma parsing allows denial of service",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "send: send vulnerable to template injection that can lead to XSS",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "serve-static: serve-static vulnerable to template injection that can lead to XSS",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "tmp: tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter",
      "severity": "low"
    }
  ],
  "status": "FAILED",
  "scannedAt": "2026-04-27T06:28:57.076Z",
  "semgrepRan": false,
  "npmAuditRan": true,
  "pipAuditRan": true
}